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Please amend paragraph 0023 as follows: 

Turning to FIG. 2A, FIG. 2A illustrates a distributed control system 60 having both 
a load sharing structure and a primary/backup structure in accordance with the one 
embodiment of the present invention. System 60 has three primary units 110,210 and 3 1 0 
disposed in sub-systems 1 00, 200 and 300 respectively. System 60 further has backup units 
120, 220 and 320 disposed in sub-systems 100, 200 and 300 respectively. Backup units 120, 
220 and 320 correspond to primary units 3 1 0, 1 1 0, and 2 1 0, respectively, as indicated by the 
arrows in FIG. 2A. System 60 further includes a distributed control environment 400 
comprised of a middleware platform and being programmed and configured to dist r ibute 
processing convey data among the plurality of sub-systems, the configuration management 
unit, the distributed algorithm processing unit, and the shared resource unit ., a Configu r a t ion 
Manag e m e nt unit (or CM uni t ) 500, a dis t ribu t ed algo r i t hm p r ocessing unit 600, a logical 
sha r ed resou r ce unit 700, and an e v e n t g e nera t ion unit 800 . 

Please amend paragraph 0030 as follows: 

When a new event is generated, like illustrated in FIG. 3B, the CM unit 500 and the 
distributed control environment 400 designates primary units 210 and 310 to process the 
events and take over the processing load originally destined for primary unit 1 10. Even 
though primary unit 210 and primary unit 1 10 ! are both disposed in the same sub- system 
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200, the primary unit 110 1 is used only to process events originally designated to be 
processed by primary 1 10. Primary 1 10 f [[is]] does not participate in the load sharing with 
primary units 2 1 0 and 3 1 0. Thus, in the system 70 of FIG. 3B, if primary unit 1 1 0 fails and 
backup unit 220 becomes primary unit 1 10 ? which serves to replicate primary unit 1 10, 
primary unit 1 10 and primary unit 1 10' do not participate in the load sharing with primary 
units 2 1 0 and 3 1 0. Therefore, newly generated events generated when primary unit 1 1 0 is 
not working are processed only by primary units 2 1 0 and 310. When primary unit 1 1 0 should 
later be restored and become functional, primary unit 1 1 0' reverts back to becoming backup 
unit 220 and primary unit 1 1 0, having been restored, serves to load share with primary units 
210and310. 



